Software Supply Chain Engineer (f/m/x)
⚲ Kraków, Poznań, Warszawa, Toruń, Wrocław, Rzeszów, Bydgoszcz, Łódź, Białystok, Piła, Lublin, Katowice, Gdańsk, Szczecin
24 000 - 27 000 PLN (B2B)
Wymagania
- Open Source
- CI/CD
- SBOM
- Dependency Management
- Linux
- CycloneDX
- Microsoft Windows
- Golang (nice to have)
- Syft (nice to have)
Opis stanowiska
O projekcie:
We are looking for an experienced Software Supply Chain Engineer to join our InnerSource & Open Source Office (ISOSO). In this role, you will collaborate with software architects, developers, and cross-functional teams to ensure compliance with open source software usage in our commercial products. This remote position offers you the opportunity to strengthen our Software Supply Chain Compliance & Integrity team and contribute to regulatory compliance in a dynamic environment.
Wymagania:
- Minimum 5 years of experience in software development with a strong focus on open source compliance- Bachelor's degree in Computer Science, Software Engineering, or a related field- Proven experience with CI/CD pipelines and integrating open source compliance checks into the development process- Thorough understanding of open source licenses and best practices for compliance- Demonstrable experience working with CycloneDX or similar SBOM formats- Proficiency in managing dependencies across multiple programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScript- Familiarity with both Linux and Windows operating systems and their interactions with open source components- Fluent English and Polish- Residence in Poland
Nice-to-have requirements
- Experience in regulated industries such as healthcare or medical devices- Knowledge of container and virtual machine technologies- Deep familiarity with Golang and the Syft codebase is highly desired
Codzienne zadania:
- Collaborating with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products, detailing open source components and dependencies
- Reviewing and analyzing the usage of open source software to ensure compliance with relevant regulations and licenses, considering deployment and architecture implications
- Integrating open source compliance checks into CI/CD pipelines to facilitate early identification of compliance issues and minimize risks
- Managing dependencies for at least two programming languages, such as .NET/C#, Python, Java, C/C++, or Node.JS/TypeScript, while considering both proprietary and open source components
- Creating and maintaining clear compliance documentation, including policies and best practices, to foster a compliant development environment
- Utilizing expertise in CycloneDX to enhance the accuracy and efficiency of compliance processes
- Staying informed about industry regulations, particularly FDA requirements, to ensure alignment with current and emerging standards
- Providing training and support to development teams on open source compliance practices, fostering a culture of awareness and responsibility
- Driving upstream contributions to Syft in Golang to enhance its capabilities in artifact analysis and supply chain security
We are looking for an experienced Software Supply Chain Engineer to join our InnerSource & Open Source Office (ISOSO). In this role, you will collaborate with software architects, developers, and cross-functional teams to ensure compliance with open source software usage in our commercial products. This remote position offers you the opportunity to strengthen our Software Supply Chain Compliance & Integrity team and contribute to regulatory compliance in a dynamic environment.
Wymagania:
- Minimum 5 years of experience in software development with a strong focus on open source compliance- Bachelor's degree in Computer Science, Software Engineering, or a related field- Proven experience with CI/CD pipelines and integrating open source compliance checks into the development process- Thorough understanding of open source licenses and best practices for compliance- Demonstrable experience working with CycloneDX or similar SBOM formats- Proficiency in managing dependencies across multiple programming languages such as .NET/C#, Python, Java, C/C++, Node.JS/TypeScript- Familiarity with both Linux and Windows operating systems and their interactions with open source components- Fluent English and Polish- Residence in Poland
Nice-to-have requirements
- Experience in regulated industries such as healthcare or medical devices- Knowledge of container and virtual machine technologies- Deep familiarity with Golang and the Syft codebase is highly desired
Codzienne zadania:
- Collaborating with software architects and senior developers to generate comprehensive Software Bills of Materials (SBOM) for commercial products, detailing open source components and dependencies
- Reviewing and analyzing the usage of open source software to ensure compliance with relevant regulations and licenses, considering deployment and architecture implications
- Integrating open source compliance checks into CI/CD pipelines to facilitate early identification of compliance issues and minimize risks
- Managing dependencies for at least two programming languages, such as .NET/C#, Python, Java, C/C++, or Node.JS/TypeScript, while considering both proprietary and open source components
- Creating and maintaining clear compliance documentation, including policies and best practices, to foster a compliant development environment
- Utilizing expertise in CycloneDX to enhance the accuracy and efficiency of compliance processes
- Staying informed about industry regulations, particularly FDA requirements, to ensure alignment with current and emerging standards
- Providing training and support to development teams on open source compliance practices, fostering a culture of awareness and responsibility
- Driving upstream contributions to Syft in Golang to enhance its capabilities in artifact analysis and supply chain security
🔍 Dekoder Ogłoszenia
🔴
collaborate with software architects, developers, and cross-functional teams
Będziesz musiał dużo komunikować się z różnymi zespołami, co może oznaczać sporo spotkań i koordynacji.
🔴
ensure compliance with open source software usage in our commercial products
Twoja praca będzie polegać głównie na sprawdzaniu i egzekwowaniu zgodności z licencjami open source, a nie na tworzeniu nowego oprogramowania.
🔴
contribute to regulatory compliance in a dynamic environment
Praca w środowisku podlegającym ścisłym regulacjom, co może oznaczać biurokrację i powolne wprowadzanie zmian.
🔴
Minimum 5 years of experience in software development with a strong focus on open source compliance
Chociaż wymagane jest doświadczenie w rozwoju oprogramowania, główny nacisk kładziony jest na aspekty związane z licencjami open source, a nie na samo kodowanie.
🟡
Deep familiarity with Golang and the Syft codebase is highly desired
Znajomość tych konkretnych narzędzi jest bardzo ważna, co może sugerować, że będą one kluczowe w codziennej pracy.